Collection Rule for event with source CertificationAuthority and ID 46

Summary

The Active Directory Certificate Services (AD CS) exit module performs several functions after a certificate has been issued, such as publishing the certificate to the file system or sending an e-mail notification.

Resolutions

Address an exit module error

An Active Directory Certificate Services (AD CS) exit module can perform additional functions after a certificate has been issued, such as publishing the certificate to the file system or sending an e-mail notification.

For information about modifying an exit module, see Configuring the policy and exit modules ( http://go.microsoft.com/fwlink/?LinkId=104207).

If there is a problem with an exit module and the error cannot be resolved by addressing related symptoms:

• For a non-Microsoft exit module, contact the exit module provider for assistance.

• For a Microsoft exit module, contact Microsoft Customer Service and Support. For more information, see  http://go.microsoft.com/fwlink/?LinkId=89446.

Additional

The process you use to confirm that an exit module is functioning properly depends on the exit module you are using.

If you are using the default Microsoft exit module:

• Submit and process a certificate request by following the procedure in the "Process a certificate request" section.

• If the request is processed without additional errors, and any Simple Mail Transfer Protocol (SMTP) notifications you have configured in the registry are sent, the exit module is functioning properly.

If you are using a custom or non-Microsoft exit module, confirm that the custom exit module is completing the additional tasks that it was intended to perform.

Process a certificate request

To confirm that certificate request processing is working properly:

• Open the Certificates snap-in for the user account.

• In the console tree, double-click Certificates - Current User, and click Personal.

• On the Action menu, point to All Tasks, and click Request New Certificate to start the Certificate Enrollment wizard.

• Use the wizard to create and submit a certificate request for any type of certificate that is available.

• Confirm that the enrollment completes successfully and no errors are reported.